CVE-2019-13670
Insufficient data validation in JavaScript in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- Update to 77.0.3865.90-0ubuntu0.16.04.1
Published Updated
PatchFirst · Latest vulnerabilities
chromium-browser vulnerabilities · Page 27
Vulnerabilities published for chromium-browser in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 1138
CVE-2019-13669
Incorrect data validation in navigation in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
- Update to 77.0.3865.90-0ubuntu0.16.04.1
Published UpdatedCVE-2019-13668
Insufficient policy enforcement in developer tools in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
- Update to 77.0.3865.90-0ubuntu0.16.04.1
Published UpdatedCVE-2019-13667
Inappropriate implementation in Omnibox in Google Chrome on iOS prior to 77.0.3865.75 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
- Update to 77.0.3865.90-0ubuntu0.16.04.1
Published UpdatedCVE-2019-13666
Information leak in storage in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
- Update to 77.0.3865.90-0ubuntu0.16.04.1
Published UpdatedCVE-2019-13665
Insufficient filtering in Blink in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to bypass multiple file download protection via a crafted HTML page.
- Update to 77.0.3865.90-0ubuntu0.16.04.1
Published UpdatedCVE-2019-13664
Insufficient policy enforcement in Blink in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to bypass content security policy via a crafted HTML page.
- Update to 77.0.3865.90-0ubuntu0.16.04.1
Published UpdatedCVE-2019-13663
IDN spoofing in Omnibox in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
- Update to 77.0.3865.90-0ubuntu0.16.04.1
Published UpdatedCVE-2019-13662
Insufficient policy enforcement in navigations in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to bypass content security policy via a crafted HTML page.
- Update to 77.0.3865.90-0ubuntu0.16.04.1
Published UpdatedCVE-2019-13661
UI spoofing in Chromium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof notifications via a crafted HTML page.
- Update to 77.0.3865.90-0ubuntu0.16.04.1
Published UpdatedCVE-2019-13660
UI spoofing in Chromium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof notifications via a crafted HTML page.
- Update to 77.0.3865.90-0ubuntu0.16.04.1
Published UpdatedCVE-2019-13659
IDN spoofing in Omnibox in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
- Update to 77.0.3865.90-0ubuntu0.16.04.1
Published UpdatedCVE-2016-9652
Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75.
- Update to 55.0.2883.87-0ubuntu0.16.04.1263
Published UpdatedCVE-2016-5194
Unspecified vulnerabilities in Google Chrome before 54.0.2840.59.
- Update to 55.0.2883.87-0ubuntu0.16.04.1263
Published UpdatedCVE-2016-5202
browser/extensions/api/dial/dial_registry.cc in Google Chrome before 54.0.2840.98 on macOS, before 54.0.2840.99 on Windows, and before 54.0.2840.100 on Linux neglects to copy a device ID before an erase() call, which causes the erase operation to access data that that erase operation will destroy.
- Update to 55.0.2883.87-0ubuntu0.16.04.1263
Published UpdatedCVE-2019-15903
In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.
- Update to 78.0.3904.70-0ubuntu0.16.04.2
Published UpdatedCVE-2019-5840
Incorrect security UI in popup blocker in Google Chrome on iOS prior to 75.0.3770.80 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
- Update to 76.0.3809.87-0ubuntu0.16.04.1
Published UpdatedCVE-2019-5839
Excessive data validation in URL parser in Google Chrome prior to 75.0.3770.80 allowed a remote attacker who convinced a user to input a URL to bypass website URL validation via a crafted URL.
- Update to 76.0.3809.87-0ubuntu0.16.04.1
Published UpdatedCVE-2019-5838
Insufficient policy enforcement in extensions API in Google Chrome prior to 75.0.3770.80 allowed an attacker who convinced a user to install a malicious extension to bypass restrictions on file URIs via a crafted Chrome Extension.
- Update to 76.0.3809.87-0ubuntu0.16.04.1
Published UpdatedCVE-2019-5837
Resource size information leakage in Blink in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
- Update to 76.0.3809.87-0ubuntu0.16.04.1
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.